summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Be sure to run rc.d/zfs before mountcritremote. This way we can for examplepjd2008-03-191-0/+1
| | | | | | configure devfs rules in /etc/devfs.conf for ZVOLs. Submitted by: Yarema <yds@CoolRat.org>
* Do nextboot -D twice during boot. The first time in rc.d/root which ensures ↵delphij2008-03-111-1/+1
| | | | | | | | | | | | | that we can remove the file as early as possible, but shut up nextboot at this moment if the operation is failed, because /boot is not necessarily a part of /; the newly added second run is placed in rc.d/mountlate after all filesystems were mounted. Discussed at: -rc@ Suggestions from: brooks, mtm MFC after: 1 month
* rootdelphij2008-03-111-0/+6
|
* The check for errors from the mount command did not work as intendedmtm2008-03-062-2/+8
| | | | | | | | because another command (echo) is executed between the mount command and the check. Reported by: Sergey Baturov <sergey@toor.org.ru> MFC after: 2 weeks
* The rarpd(8) daemon must be instructed to start on all interfaces or amtm2008-03-061-1/+1
| | | | | | | | | specific one. Instruct it to listen on all interfaces so that enabling it in rc.conf(5) works "out of the box." PR: conf/121406 Submited by: trasz MFC after: 1 week
* Use the new command file feature of ddb(8) to support setting ddb(4)brooks2008-03-055-2/+51
| | | | | | | | | scripts at boot. This is currently disabled by default. /etc/ddb.conf contains some potentially reasonable default scripts. PR: conf/119995 Submitted by: Scot Hetzel <swhetzel at gmail dot com> (Earlier version) X-MFC after: textdumps
* Fix quoting for the dnsbl example -- m4 misparses quoted strings withgshapiro2008-02-171-1/+1
| | | | | | | | commas due to our deconstruction of the line in cf/feature/dnsbl.m4. PR: 120038 Submitted by: mattijs vreeling MFC after: 1 week
* Use better examples (and comment them out for safety).gshapiro2008-02-171-5/+12
| | | | | | PR: 118837 Submitted by: Matthew Seaman MFC after: 1 week
* From the 4 February 2008 update:dougb2008-02-071-3/+8
| | | | IPv6 addresses for 6 of the root name servers!
* Eliminate xargs in favor of find -exec {} +des2008-02-031-2/+1
|
* Rewrite to consume significantly less memory, by using find -s instead ofdes2008-02-021-16/+11
| | | | | | | | | | | | | find | sort. As a bonus, this simplifies the logic considerably. Also remove the bogus "overruning the args to ls" comment and the corresponding "-n 20" argument to xargs; the whole point with xargs is precisely that it knows how large the argument list can safely get. Note that the first run of the updated script may hypotheticall produce false positives due to differences between find's and sort's sorting algorithm. I haven't seen this during testing, but others might. MFC after: 2 weeks
* When the state of the interface changes rapidly enough (usually due tobrooks2008-02-011-1/+5
| | | | | | | | | | | | | rapid wireless association changes in my experience), there is a race where dhclient is in the process of exiting due to the link going down when the link coming up causes devd to try and start a new one. This results is the link being up, but no dhclient running. Work around this race by checking a second time after a one second delay before refusing to start a dhclient instance due to one already being running. MFC after: 1 week
* Add a dummynet_enable knob to go with firewall_enable. If this knobmtm2008-01-272-0/+9
| | | | | | | | is enabled dummynet(4) is added to the list of required modules. Discussed on: #freebsd-bugbusters (rwatson, trhodes) PR: conf/79196 MFC after: 1 week
* Clarify that devfs_system_ruleset should contain a name, not a number.mtm2008-01-271-1/+1
| | | | | | Prompted by PR conf/85363 MFC after: 3 days
* Generally, anything that runs rc.d scripts internally shouldmtm2008-01-263-5/+5
| | | | start using the quiet prefix (i.e. quietstart, quietstop, etc...).
* Generally, anything that runs rc.d scripts internally shouldmtm2008-01-261-5/+5
| | | | start using the quiet prefix (i.e. quietstart, quietstop, etc...).
* Use 'quietstart' so as not to get spammed with informational diagnostics.mtm2008-01-261-24/+26
|
* Re-implement: do not silently fail when a command is not carriedmtm2008-01-263-3/+18
| | | | | | | | | | | | | | | out because the rc.conf(5) variable was not enabled. Display a message that the command wasn't run and offer suggestions on what the user can do. Implement a quiet prefix, which will disable some diagnostics. The fast prefix also implies quiet. During boot we use either fast or quiet. For shutdown we already use 'faststop'. So, this informational message should only appear during interactive use. An additional benefit of having a quiet prefix is that we can start putting some of our diagnostic messages behind this knob and start "de-cluttering" the console during boot and shutdown.
* Backout previous commit. It's going to clutter the consolemtm2008-01-251-3/+0
| | | | | | | | | | during boot and shutdown. I think I'll hide it behind autoboot or maybe take brooks@ suggestion and implement a different command prefix for booting/shutdown purposes, but in any case it needs more thought and attention. Noticed by: ceri Pointyhat to: mtm
* If the rc.conf(5) variable for a script is not enabled do not failmtm2008-01-251-0/+3
| | | | | | | | silently. Display a message that the command wasn't run and make possible suggestions for what to do. PR: conf/118770 MFC after: 1 week
* Rev. 1.6 made it impossible to use rc.d/kerberos with the krb5 port.mtm2008-01-252-2/+1
| | | | | | | | Re-implement the change so that the script once again works with the krb5 port. Submitted by: kensmith (slightly modified) MFC after: 3 days
* Shorter equivalent of the command.ru2008-01-241-1/+1
|
* Improve kernel NAT support in rc.firewallrafan2008-01-212-1/+10
| | | | | | | | | | - Allow IP in firewall_nat_interface, just like natd_interface - Allow additional configuration parameters passed to ipfw via firewall_nat_flags - Document firewall_nat_* in defaults/rc.conf Tested by: Albert B. Wang <abwang at gmail.com> MFC after: 1 month
* Add warning about this script dealing with untrusted data.simon2008-01-131-0/+6
| | | | MFC after: 1 week
* o From the Problem Report: the TCP_DROP_SYNFIN kernel option is nowmaxim2008-01-121-2/+0
| | | | | | | | | included in the kernel by default. Remove reference to this option from defaults/rc.conf and rc.conf(5). PR: conf/119098 Submitted by: Beat Gaetzi MFC after: 1 week
* o Correct an info about "Firewalls and Internet Security" book: name,maxim2008-01-122-14/+12
| | | | | | | authors list, ISBN, URLs. PR: conf/119590 MFC after: 1 week
* Remove from the default empty zone list zones that, unlike the others,dougb2008-01-111-8/+0
| | | | could theoretically be allocated one day.
* A new configuration variable, daily_status_mail_rejects_shorten, allowsdds2008-01-082-1/+9
| | | | | | | | the rejected mail reports to tally the rejects per blacklist without providing details about individual sender hosts. The default configuration keeps the reports in their original form. MFC after: 1 week
* Update pkg_version_index to INDEX-8dougb2007-12-201-1/+1
|
* Only pass paths to directories or config files that exist for ldconfig forjhb2007-12-131-2/+8
| | | | | | 32-bit binaries. MFC after: 3 days
* Add an empty stop_cmd to the remaining scripts that don't startdougb2007-12-084-0/+4
| | | | daemons and don't already have one.
* Remove a meaningless KEYWORDdougb2007-12-081-1/+1
|
* Remove the bootconf.sh script. It was never used on FreeBSD, and wasdougb2007-12-081-81/+0
| | | | removed from the Makefile in version 1.5 (2002/09/02) but never GC'ed.
* Remove spurious # marks to be more consistent with existing style.dougb2007-12-084-4/+0
|
* Remove empty REQUIRE linedougb2007-12-081-1/+0
|
* Remove $NetBSD$ CVS tags. We no longer attempt to synch our rc.d filesdougb2007-12-0855-55/+0
| | | | | with theirs, so this information doesn't need to be in the live file. Having it in our CVS history is enough.
* Add /root/, /.cshrc, and /.profile to the default UpdateIfUnmodifiedcperciva2007-11-281-1/+1
| | | | | | | directive. Users get irritated if FreeBSD Update steps on these while upgrading to a new release. MFC after: 3 days
* Don't delete files in the X11 socket directories under /tmp (.X11-unix,jhb2007-11-281-1/+3
| | | | | | | | | .ICE-unix, .font-unix, .XIM-unix) when purging files from /tmp via the daily 100.clean-tmps job. If you are logged into an X session longer than the timeout period (default of 3 days), then this job can delete the X11 sockets out from under the session without this fix. MFC after: 3 days
* Update the shlib version for libgssapi_krb5. This file needs to be updatedjhb2007-11-271-1/+1
| | | | | | anytime that library version is bumped. XXX: I wonder if this breaks any 6.x binaries using Kerberos5 via GSSAPI.
* Also check setuid executables on ZFS.ru2007-11-231-1/+1
|
* Bump up the number of ttys supported by pty(4) to 512 by making use ofjhb2007-11-196-0/+1536
| | | | | | | [pt]ty[lmnoLMNO][0-9a-v]. MFC after: 3 days Reviewed by: rwatson
* Add ttys lines for pts/0-pts/255.rwatson2007-11-156-0/+1536
| | | | MFC after: 3 days
* Add reload functionality.brix2007-11-141-1/+3
| | | | | PR: conf/116659 Approved by: sam, erwin (mentor)
* Add support for "freebsd-update -r newrelease upgrade" -- binarycperciva2007-11-121-1/+11
| | | | | | | | | | | | | | | | | | | upgrading to new releases. Important parts of this code include * automatically determining which optional components (e.g., src, info, proflibs) are installed. * merging changes in files which are modified locally and have changed between the currently running and new release. * prompting the user to rebuild all 3rd party software before deleting old shared libraries. Yes, this is compatible with "freebsd-update rollback" -- you can test a new -BETA and roll back to the old release if you don't like it. Subject to re@ approval, this will be MFCed before 7.0-BETA3 and 6.3-RC1. MFC after: 2 days
* Update pf examples from OpenBSD to catch up with new stateful defaults andmlaier2007-11-112-84/+1
| | | | other syntax changes. Move pf.conf from /etc to examples, too.
* spaces are preferred to tabssam2007-11-101-4/+4
| | | | Noted by: simon
* add wpa_supplicant + hostapd directories to examplessam2007-11-101-0/+4
| | | | MFC after: 1 week
* Link wpi(4) into the build.benjsc2007-11-081-0/+2
| | | | | | | | | | This includes: o mtree (for legal/intel_wpi) o manpage for i386/amd64 archs o module for i386/amd64 archs o NOTES for i386/amd64 archs Approved by: mlaier (comentor)
* Another vestige of OLDCARD that needs to be retired.imp2007-11-082-2356/+1
| | | | Prodded by: jhb@
* Change wpa_supplicant to down the interface at the start of the init routine.thompsa2007-11-051-3/+0
| | | | | | | | | | | | | | | | | | wpa_supplicant expects that it has exclusive access to the net80211 state so when its starts poking in the WEP/WPA settings and the card is already scanning it can cause net80211 to try and associate incorrectly with a protected AP. This is an inconvenience for firmware based cards such as iwi where it can be sent an auth instruction with incomplete security info and cause a firmware error. Remove the 'ifconfig up' from network.subr since wpa_supplicant will immediately down the interface again. Reported by: Guy Helmer (and others) Reviewed by: sam, brooks, avatar MFC after: 3 days
OpenPOWER on IntegriCloud